Title: RELATED WORK

Related work

In the recent years, several studies on privacy and security aspects of RFID systems have been conducted. Many of them, such as for instance the report on Risks and opportunities of applying RFID systems (“Risiken und Chancen des Einsates von RFID-Systemen”) from 2004 , have focussed solely on technical security and privacy aspects and have not taken a holistic approach.

In 2006 a book called RFID Applications, Security, and Privacy edited by Simon Garfinkel and Beth Rosenberg was published . The book is in essence a collection of articles written by a number of researchers, developers and privacy activists. The purpose of the book is to give a good overview of RFID applications, its underlying technology and the public policy debate, something which we believe it is doing quite well. This goal makes the book to take somewhat of a holistic approach. However, it does not try to create or explore the possibilities of creating a framework or to bring the different viewpoints together in a holistic document.  

In spring 2007 The National Institute of Standards and Technology (NIST) published Guidelines for Securing Radio Frequency Identification (RFID) systems . In chapter 6 privacy considerations are discussed. This discussion is mainly centred on the US legal landscape and RFID considerations are specifically discussed in connection with OECD principles and Federal CIO Council Privacy Control Families (FCCPCF). The approach is not holistic but rather takes a security approach with a business perspective. The problems in the legal and ethical landscape are not analysed and discussed, except for the fact that some considerations mention the fact that it could be hard to comply with some of the principles in OECD and FCCPCF. Further, the customer perspective is, in our view, poorly treated.

Recently, TNO and DG JRC – IPTs published an extensive study on “RFID Technologies: emerging Issues, Challenges and Policy Options” , which investigates RFID technologies and their socio-economic implications. It looked at technical, market, societal and legal issues in order to identify barriers and opportunities. Strengths, weaknesses, threats and opportunities, are also identified through the analysis of specific application areas. Although the study has thus another focus than our framework, it also includes a chapter on “Privacy Aspects of RFID”, which is however, in contrast to our framework, discussing legal, social and technical privacy aspects as well as legal, self-regulatory and technical strategies to cope with privacy threats in less details. Besides, it does not address specifically ethical privacy aspects.

Within the FIDIS project, Deliverable D3.6 discusses RFID and biometrics and Deliverable D7.7 discusses the effects of Ambient Intelligence systems with a focus on RFID. However, in contrast to D12.3, those deliverables are only analysing impacts but are not elaborating a holistic privacy framework including approaches to privacy-enhancements or discuss possible solution approaches in focused areas. The related findings of the D7.7 and their consequences are presented in Chapter